New Delhi, April 29: India’s security agencies are increasingly concerned about a strategic shift in terror operations, with lone actors and small, self contained groups emerging as the primary threat, replacing traditional, structured terror modules.
Officials tracking evolving patterns say future attacks are less likely to involve elaborate cross border coordination or identifiable handlers. Instead, individuals or small “buddy pairs” are expected to operate independently, significantly reducing the chances of detection through conventional intelligence methods.
According to intelligence inputs, this shift is being driven by a combination of tactics employed by Pakistan’s Inter-Services Intelligence and global terror outfit Islamic State, both of which are adapting their strategies to evade surveillance and attribution.
While the ISI is believed to be pushing for self funded, home grown modules within India, it is also cautious about maintaining plausible deniability. Officials say there is a deliberate effort to ensure that any potential attack leaves no direct link to Pakistan, particularly in the aftermath of India’s past counter terror responses such as Operation Sindoor.

In contrast, the Islamic State’s approach focuses on deep psychological impact rather than scale. Intelligence officials note that even low casualty attacks can create widespread fear, especially when carried out unpredictably by individuals who appear indistinguishable from the general public.
“The concern is not just the attack, but the uncertainty it creates. Anyone could be a potential attacker, and that is the real challenge,” an official said, highlighting the growing complexity of identifying threats in advance.
Investigations indicate that radicalisation is increasingly taking place online, with extremist organizations flooding digital platforms with propaganda and “Do It Yourself” (DIY) operational material. This content enables individuals to plan and execute attacks without direct contact with handlers or networks.
Recent cases across India point to this trend. Incidents involving individuals such as Zaib Zubair Ansari in Mumbai, Rizwan in Delhi, and Tushar Chauhan in Uttar Pradesh have raised alarms within the intelligence community, suggesting an increase in self-radicalised actors.
Officials say that unlike traditional terror cells, these individuals often leave minimal communication or financial trails, making them extremely difficult to track. In many cases, even family members remain unaware of their radicalisation, as individuals continue to lead outwardly normal lives.
“The zero communication model is what makes this a nightmare for agencies,” an official noted, adding that even global intelligence networks are grappling with similar challenges.
Authorities have, in the past, relied on community vigilance, urging families and acquaintances to report behavioural changes. While this has helped prevent certain incidents, officials admit that radicalised individuals are becoming increasingly adept at concealing their intentions.
The trend is not unique to India but reflects a broader global shift in terror tactics, where decentralised, ideologically motivated individuals act without direct organisational control. This evolution has forced security agencies to rethink their approach.
Experts say the response will need to move beyond traditional surveillance methods to a more proactive framework involving behavioral monitoring, enhanced digital intelligence, and stronger community engagement.
There is also a growing emphasis on taking down extremist content online in real time, as the spread of radical material continues to fuel self radicalisation.
Officials caution that the scale of the challenge is significant and likely to intensify. As terror groups adapt to tighter security environments, lone actors may become the preferred method of attack, requiring India to strengthen both its intelligence capabilities and societal awareness.
“The nature of the threat is changing, and so must the response,” an official said, underlining the need for constant vigilance in the face of an evolving security landscape.


